Overview

overview

3

Static

static

3

390015c12a...18.pdf

windows7-x64

1

390015c12a...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    12/05/2024, 07:42

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    390015c12aab94dc077dd1b37a31b01e_JaffaCakes118.pdf

  • Size

    46KB

  • MD5

    390015c12aab94dc077dd1b37a31b01e

  • SHA1

    bb0afd1046d47aa8295ee7a1720beb3c20f4e023

  • SHA256

    9873e6baf1fa50ecbb3e8335f9478539a1a6cf789ce322e482b101a26296de34

  • SHA512

    aa761e057031cc61a7a0a52464e7f1a4f14fe312ebe647ca1d71b5ea53bdb8cdb045459e270a190cf54df3fcb9a5c023645a1d75dba2f540f9f0f79217fb8f43

  • SSDEEP

    768:lXuMZmwgCLWarOE5HpPhe1vbtHlRMTtxlXo9/8WjLd4vtwvEoOz51WfBOglU6/C7:lXFZmGWSP1he1vbtHlRMT3PW94vt4OzN

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\390015c12aab94dc077dd1b37a31b01e_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1688

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    7bd5fd32e90742dc9649f6af75adcc3c

    SHA1

    acd907c17ee7916fc6bade545f8f365de5163eef

    SHA256

    2a3c5d8fa3cfee5cd21adb621e4a3d7bffdaa851c686ad62f5ac60a18f5d2db7

    SHA512

    ddc16d2e482dd211cb335b5fb3086efd9d48df2212acde0e29d1a99a12be1e447288ee194d382b7b028ede852870e1d4470ac9303e4773a60659573833e7c626

    Download Submit